Vanadium is the default browser that is included with GrapheneOS. The Chromium-based browser includes a number of patches which help improve the security and privacy of the WebView used by other apps.
Among the numerous privacy and security enhancements listed in their documentation, Vanadium notably includes a built-in content blocker and disables JavaScript Just-In-Time (JIT) compilation by default, both of which can be toggled on a per-site basis.
Configuration
As explained in their documentation, Vanadium prioritizes better privacy- and security-enhancing defaults to avoid users making themselves stand out by opting into non-default settings.
You might, however, consider configuring the following settings.
Privacy and security
-
Select Close tabs on exit
-
Toggle disable cross-origin referrer or reduce cross-origin referrer under cross-origin referrer policy
-
Uncheck Improve search suggestions
-
Select Open external links in incognito[1]
-
Select Lock Incognito tabs when you leave Vanadium
-
Toggle off under Send a “Do Not Track” Request[2]
-
(Optional) Toggle on under Safe Browsing[3]
Password Manager
- Uncheck Save Passwords
- Uncheck Auto Sign-in
Payment Methods
- Uncheck Save and fill payment methods
-
With this setting enabled, all links from other apps, custom tabs, search intents and share intents will open in incognito tabs. ↩︎
-
DNT is deprecated and can make you more easily fingerprinted ↩︎
-
Safe Browsing can offer protection against malicious content, but it sends some data to Google. It also does not work unless Sandboxed Google Play Services are installed ↩︎
Last edited by @anonymous261 2025-07-04T18:19:11Z
(You should not save info in your browser like this for security reasons, use a dedicated password manager like Bitwarden or Proton Pass instead)